Microsoft security advisory (AV26-1001)

Serial Number: AV26-1001
Date: October 5, 2026

As of October 2, 2026, Microsoft is affected by a vulnerability in the following products:

• Microsoft Exchange Server 2016 Cumulative Update 23
  • Prior to 15.01.2507.075
• Microsoft Exchange Server 2019 Cumulative Update 14
  • Prior to 15.02.1544.048
• Microsoft Exchange Server 2019 Cumulative Update 15
  • Prior to 15.02.1748.053
• Microsoft Exchange Server Subscription Edition RTM
  • Prior to 15.02.2562.053

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Microsoft Exchange Server Elevation of Privilege Vulnerability CVE-2026-96940
• Microsoft Security Update Guide